ZeroHour

CVE-2018-19128

CVSS 3.0
6.5 medium
EPSS
1%p62
Published
()
Modified
Description

In Libav 12.3, there is a heap-based buffer over-read in decode_frame in libavcodec/lcldec.c that allows an attacker to cause denial-of-service via a crafted avi file.

Vendors
libav
Products
libav
Weakness
CWE-125
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

In the news

No ingested article mentions this CVE yet.